--- title: "Privacy Policy | Angelo Luiz Futolan" description: "How Angelo Luiz Futolan collects, uses, and protects your information on this website, including the Cal.com scheduling service." url: "https://heyitsangelo.com/privacy/" updated: "2026-10-01" --- # Privacy policy Effective date: 8 August 2026 · Last updated: 1 October 2026 This Privacy Policy explains what information is collected when you use this website, how it is used, who it is shared with, and the choices and rights you have. It applies to this website only and not to any third-party site linked from it. **On this page:** [1 Who is responsible](https://heyitsangelo.com/privacy/#who) · [2 Information collected](https://heyitsangelo.com/privacy/#collect) · [3 Third-party services](https://heyitsangelo.com/privacy/#third-parties) · [4 Cookies & local storage](https://heyitsangelo.com/privacy/#cookies) · [5 How information is used](https://heyitsangelo.com/privacy/#use) · [6 Legal basis (GDPR)](https://heyitsangelo.com/privacy/#legal-basis) · [7 Data retention](https://heyitsangelo.com/privacy/#retention) · [8 Your rights](https://heyitsangelo.com/privacy/#rights) · [9 Data security](https://heyitsangelo.com/privacy/#security) · [10 International transfers](https://heyitsangelo.com/privacy/#transfers) · [11 Children’s privacy](https://heyitsangelo.com/privacy/#children) · [12 Changes to this policy](https://heyitsangelo.com/privacy/#changes) · [13 Contact](https://heyitsangelo.com/privacy/#contact) ## [1. Who is responsible for your data](https://heyitsangelo.com/privacy/#who) This website is operated by **Angelo Luiz Futolan** (“I”, “me”, or “the site owner”), a remote SEO manager. For any privacy question or request, contact . ## [2. Information collected](https://heyitsangelo.com/privacy/#collect) This is a simple, content-focused website. It shows no ads. It measures how the site is used with Google Analytics and Google Ads measurement, through Google Tag Manager, as §3 and §4 explain, and you can turn that off at any time. Otherwise, information is only collected in two situations: ### [a. When you book a call](https://heyitsangelo.com/privacy/#collect-booking) The booking feature is provided by **Cal.com**, embedded on this site in the “Start a Conversation” booking window and on the booking page. If you choose to schedule a call, you may provide your **name, email address,** and anything you type into the booking form (such as your website or what you would like to discuss), along with the time you pick and your time zone. This information is submitted directly to Cal.com to create the appointment; Cal.com then adds the call to Google Calendar with a Google Meet video link and sends you a confirmation. You provide this information voluntarily; the rest of the website works without it. ### [b. When your browser loads the page](https://heyitsangelo.com/privacy/#collect-browser) Like most websites, standard technical information (such as your IP address and browser user-agent) is processed by the hosting provider that delivers the pages (Cloudflare, see §3). Fonts are served from this site, so no font provider receives your data. Server hosting logs may also record standard request data for security and reliability. Cloudflare Web Analytics counts page views and measures how fast pages load, without cookies. The public endpoints for AI agents (`/mcp`, `/a2a`, `/agent/identity` and the `/oauth/` addresses) and the page where you can approve an agent’s access are served by the same Cloudflare service. They keep no record of your requests; to enforce their rate limits, requests are counted per IP address for one minute. The Google cookies this site uses, and when, are listed in §4. ## [3. Third-party services](https://heyitsangelo.com/privacy/#third-parties) To function, the site relies on a small number of third parties. Each has its own privacy policy governing how it handles your data: | Service | Purpose | Data it may receive | Its policy | | ----------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------- | | Cloudflare | Hosts and delivers this website | IP address, user-agent, request data | [Cloudflare](https://www.cloudflare.com/privacypolicy/) | | Cloudflare Web Analytics | Counts page views and measures page load timings, without cookies | Page address, referrer, browser and device type, country, load timings | [Cloudflare](https://www.cloudflare.com/privacypolicy/) | | Cal.com | Appointment scheduling / booking a call | Name, email, what you type into the booking form, the time and time zone you choose, IP address, device and browser data | [Cal.com](https://cal.com/privacy) | | Google Calendar | Creates the calendar event & invite (via Cal.com) | Name, email, event details | [Google](https://policies.google.com/privacy) | | Google Meet | Generates the video meeting link for the call (via Cal.com) | Name, email, meeting details | [Google](https://policies.google.com/privacy) | | Zoho Mail | Receives and stores the emails you send to | Name, email address, message content | [Zoho](https://www.zoho.com/privacy.html) | | Google Analytics 4 (via Google Tag Manager) | Measures how the site is used, such as pages viewed, scroll depth, clicks on email, phone, chat and social links and on “Start a Conversation”, the booking calendar opening, completed bookings, and plays of the site’s own videos | IP address (used for approximate location, not stored by Google Analytics), device and browser data, pages viewed, the events listed | [Google](https://policies.google.com/privacy) | | Google Ads measurement (the Google tag and the Conversion Linker, via Google Tag Manager) | Google’s advertising measurement: every measured page view is also sent to Google’s ad services (google.com, doubleclick.net), whether or not this site is promoted with Google Ads, so a visit or a booked call can be credited to a Google ad click | IP address, device and browser data, the page address and title, the `_gcl_au` identifier and any ad click identifier (§4) | [Google](https://policies.google.com/privacy) | The booking calendar and its related services, its fonts from Cal.com included, load only when you tick the consent box in the “Start a Conversation” booking window or on the booking page and choose “Show available times”. Every other font file is served from this site. Google Analytics and Google Ads measurement (the Google tag and the Conversion Linker) run through Google Tag Manager with Google Consent Mode v2. What they may do depends on where you are and what you choose: * **In the EU, the EEA, the UK and Switzerland**, they may not set or read cookies until you click Accept in the cookie notice. If your device’s time zone is in Europe, Google Tag Manager does not load at all until then. If it loads before your choice (for example, when your time zone is outside Europe), Google receives only cookieless pings: ad click identifiers are removed from the Google Ads requests, but the page address sent to Google Analytics can still include one. * **In any European time zone**, wherever you are, Google Tag Manager also waits for Accept. * **Everywhere else**, they run by default, and Decline turns them off. * **Decline, or a browser that sends Global Privacy Control**, is treated the same way everywhere: from that moment nothing more is sent to Google, Google Tag Manager is not loaded on later pages, the Google Analytics and Google Ads cookies and the Google tag’s local storage are removed, and the cookie notice does not ask again. You can change your choice at any time with the “Cookie settings” link in the footer. Google Tag Manager is only requested after the page has finished loading, so it never delays what you see. When you book a call in the Cal.com calendar, this site records that a booking was completed, which type of call it was (for example the free SEO consultation) and where on the site you opened the calendar. It reads only the booking’s reference and the type of call from the calendar, and never sends your name, email address or anything you typed into the booking form to Google. The YouTube, TikTok, Facebook, X, Instagram, LinkedIn, Viber, Telegram and WhatsApp links open those services, the Viber link in the Viber app and the others in a new tab. Nothing is sent to them until you click one; after that, their own privacy policies apply. ## [4. Cookies & local storage](https://heyitsangelo.com/privacy/#cookies) Google Analytics and Google Ads measurement cookies are set as §3 explains: in the EU, the EEA, the UK, Switzerland and any European time zone only after you accept, elsewhere unless you decline. This site shows no ads. These cases apply: * **Consent preference (local storage):** when you respond to the cookie notice, your choice is stored in your browser’s local storage so the notice is not shown again. This stays on your device and is not sent anywhere. * **Display preferences (local storage):** if you switch to dark mode, or hide or show the page sections panel on a wide screen, those choices are stored in your browser’s local storage so the site remembers them. This stays on your device and is not sent anywhere. * **Cal.com cookies and storage:** if you tick the consent box and show the available times, Cal.com may set its own cookies and browser storage inside its booking calendar, as needed to operate it. These are governed by Cal.com’s policy. * **Google Analytics cookies** (`_ga`, `_ga_`): distinguish visitors and visits, for up to 2 years. Decline removes them, and you can change your choice at any time with the “Cookie settings” link in the footer. * **Google Ads cookies and local storage** (`_gcl_*` cookies and the `_gcl_ls` local storage entry, set by the Google tag and the Conversion Linker): `_gcl_au` and `_gcl_ls` are set for every measured visitor, and each page view is sent with `_gcl_au` to Google’s advertising measurement, whether or not this site is promoted with Google Ads. After a Google ad click, the other `_gcl_*` cookies and `_gcl_ls` also keep that click, so a visit or a booked call can be credited to it. They last up to 90 days. Decline removes them too. * **Booking confirmation (session storage):** after you book a call, the page you booked on keeps a short code derived from the booking reference (never the reference itself or your details) in your browser’s session storage until you close the tab, so that one booking is counted only once. It stays on your device and is not sent anywhere. ## [5. How information is used](https://heyitsangelo.com/privacy/#use) * To schedule, confirm, and prepare for a call you request. * To respond to enquiries you send by email. * To deliver, secure, and maintain the website. * To understand, in aggregate, which pages, links and videos are useful, and which visits lead to a booked call. * To measure, with Google Ads measurement, which Google ads lead to visits and booked calls, if this site is promoted with Google Ads. Your information is never sold or rented, and this site shows no ads. ## [6. Legal basis for processing (GDPR)](https://heyitsangelo.com/privacy/#legal-basis) * **Consent:** for loading the third-party booking widget and any related cookies, for submitting your details to book a call, and, in the EU, the EEA, the UK and Switzerland, for Google Analytics and Google Ads measurement. You may withdraw consent at any time. Elsewhere analytics runs by default, and Decline or Global Privacy Control turns it off. * **Legitimate interests:** for delivering and securing the website (e.g. serving the site, maintaining hosting logs and rate limiting the agent endpoints) in a way you would reasonably expect. * **Performance of a request:** to arrange a call or reply to an enquiry you initiate. ## [7. Data retention](https://heyitsangelo.com/privacy/#retention) Booking and email details are kept only as long as needed to arrange and follow up on our conversation, and are then deleted or anonymised, unless a longer period is required by law. Scheduling records held by Cal.com are retained according to Cal.com’s own policy. Your consent preference remains in your browser until you clear it. Google Analytics keeps user and event level data for 14 months (its data retention setting); aggregated reports built from it can remain longer. ## [8. Your rights](https://heyitsangelo.com/privacy/#rights) Depending on where you live, you may have the right to: * Access the personal information held about you. * Correct inaccurate information. * Delete your information (“right to be forgotten”). * Restrict or object to processing. * Data portability. * Withdraw consent at any time. * Lodge a complaint with your local data-protection authority. **EEA/UK (GDPR):** the rights above apply. **California (CCPA/CPRA):** you have the right to know, delete, and correct your information, and to not be discriminated against for exercising those rights. This site does not sell personal information. Where Google Analytics or Google Ads measurement counts as sharing, Decline in the cookie notice or a Global Privacy Control signal opts you out. To exercise any right, email . ## [9. Data security](https://heyitsangelo.com/privacy/#security) The site is served over HTTPS. Reasonable technical and organisational measures are used to protect information, and the amount of data collected is deliberately kept minimal. No method of transmission over the internet is completely secure, so absolute security cannot be guaranteed. ## [10. International transfers](https://heyitsangelo.com/privacy/#transfers) The third-party services above (Cloudflare, Cal.com, Google, Zoho) may process data on servers outside your country, including the United States. Where required, those providers rely on recognised transfer mechanisms such as Standard Contractual Clauses. ## [11. Children’s privacy](https://heyitsangelo.com/privacy/#children) This website is intended for business audiences and is not directed to children under 16, and does not knowingly collect their information. ## [12. Changes to this policy](https://heyitsangelo.com/privacy/#changes) This policy may be updated from time to time. Material changes will be reflected by updating the “Last updated” date at the top of this page. Please review it periodically. ## [13. Contact](https://heyitsangelo.com/privacy/#contact) Questions or requests about this policy or your data:\ **Angelo Luiz Futolan**\ This policy is provided in good faith and reflects how this website currently handles data. It is general information, not legal advice; for a business in a regulated industry or specific jurisdiction, have it reviewed by a qualified professional.